Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-9610

cache, files, store paths should be configurable

    XMLWordPrintable

Details

    • Improvement
    • Status: Closed (View Workflow)
    • Minor
    • Resolution: Won't Fix
    • 3.1.0-dev
    • 3.1.12-RC1
    • None

    Description

      This is primarily a security feature.

      Currently phpbb code expects cache, files and store directories to be under phbb_root. By php design phpbb_root must be under webserver document root. This results in cache/files/store being under webserver document root as well.

      There is a security concern with having webserver-writable directories under webserver document root. Various workarounds involving symlinks, permissions and webserver configuration are already possible, but there is no need to have these directories under document root at all.

      This ticket proposes making cache, files and store paths configurable so that they may be entirely disconnected from webserver document root.

      Attachments

        Issue Links

          Activity

            People

              CHItA CHItA
              Oleg Oleg [X] (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: